# CVEs published 2010-03-24

19 CVEs were published on March 24, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2009-2907](https://cve.now/CVE-2009-2907.md): Multiple cross-site scripting (XSS) vulnerabilities in SpringSource tc Server 6.0.20.B and earlier, Application Management Suite (AMS) befor (no CVSS)
- [CVE-2010-0618](https://cve.now/CVE-2010-0618.md): The flood-protection feature in the base, IPDS DLE, Forms DLE, Barcode DLE, Prescribe DLE, and Printcryption DLE components on certain Lexma (no CVSS)
- [CVE-2010-0619](https://cve.now/CVE-2010-0619.md): Stack-based buffer overflow in the base, IPDS DLE, Forms DLE, Barcode DLE, Prescribe DLE, and Printcryption DLE components on certain Lexmar (no CVSS)
- [CVE-2010-1099](https://cve.now/CVE-2010-1099.md): Integer overflow in Apple Safari allows remote attackers to bypass intended port restrictions on outbound TCP connections via a port number (no CVSS)
- [CVE-2010-1100](https://cve.now/CVE-2010-1100.md): Integer overflow in Arora allows remote attackers to bypass intended port restrictions on outbound TCP connections via a port number outside (no CVSS)
- [CVE-2010-1101](https://cve.now/CVE-2010-1101.md): Integer overflow in Alexander Clauss iCab allows remote attackers to bypass intended port restrictions on outbound TCP connections via a por (no CVSS)
- [CVE-2010-1102](https://cve.now/CVE-2010-1102.md): Integer overflow in OmniWeb allows remote attackers to bypass intended port restrictions on outbound TCP connections via a port number outsi (no CVSS)
- [CVE-2010-1103](https://cve.now/CVE-2010-1103.md): Integer overflow in Stainless allows remote attackers to bypass intended port restrictions on outbound TCP connections via a port number out (no CVSS)
- [CVE-2010-1089](https://cve.now/CVE-2010-1089.md): SQL injection vulnerability in vedi\_faq.php in PHP Trouble Ticket 2.2 allows remote attackers to execute arbitrary SQL commands via the id p (no CVSS)
- [CVE-2010-1090](https://cve.now/CVE-2010-1090.md): SQL injection vulnerability in index.php in phpMySite allows remote attackers to execute arbitrary SQL commands via the action parameter. (no CVSS)
- [CVE-2010-1091](https://cve.now/CVE-2010-1091.md): Multiple cross-site scripting (XSS) vulnerabilities in contact.php in phpMySite allow remote attackers to inject arbitrary web script or HTM (no CVSS)
- [CVE-2010-1092](https://cve.now/CVE-2010-1092.md): Multiple SQL injection vulnerabilities in login.php in ScriptsFeed Business Directory Software allow remote attackers to execute arbitrary S (no CVSS)
- [CVE-2010-1093](https://cve.now/CVE-2010-1093.md): SQL injection vulnerability in rss.php in 1024 CMS 2.1.1, when magic\_quotes\_gpc is disabled, allows remote attackers to execute arbitrary SQ (no CVSS)
- [CVE-2010-1094](https://cve.now/CVE-2010-1094.md): SQL injection vulnerability in news.php in DZ EROTIK Auktionshaus V4rgo allows remote attackers to execute arbitrary SQL commands via the id (no CVSS)
- [CVE-2010-1095](https://cve.now/CVE-2010-1095.md): Cross-site scripting (XSS) vulnerability in login\_reset\_password\_page.php in Tracking Requirements & Use Cases (TRUC) 0.11.0 and earlier all (no CVSS)
- [CVE-2010-1096](https://cve.now/CVE-2010-1096.md): Multiple SQL injection vulnerabilities in searchmatch.php in ScriptsFeed Dating Software allow remote attackers to execute arbitrary SQL com (no CVSS)
- [CVE-2010-1097](https://cve.now/CVE-2010-1097.md): include/userlogin.class.php in DeDeCMS 5.5 GBK, when session.auto\_start is enabled, allows remote attackers to bypass authentication and gai (no CVSS)
- [CVE-2010-1098](https://cve.now/CVE-2010-1098.md): The ANI parser in Microsoft Windows before 7 on the x86 platform, as used in Internet Explorer and other applications, allows remote attacke (no CVSS)
- [CVE-2010-0437](https://cve.now/CVE-2010-0437.md): The ip6\_dst\_lookup\_tail function in net/ipv6/ip6\_output.c in the Linux kernel before 2.6.27 does not properly handle certain circumstances i (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-03-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.